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IN THE CLAIMS : 

Applicant respectfully requests that the Claims of the above-identified application 
be amended so as to read as follows: 

1. (Currently Amended) An anti-tampering signature methodcomprising the steps of: 

providing a rewriteable media including (i) an information display area wherein display 
data is stored in a visually viewable, rewritable and erasable state, (ii) a plurality 
of display data certifier identification areas wherein display data certifier 
signature information is stored in a visually viewable, rewritable and erasable 
state; and (iii) a plurality of certification data areas corresponding respectively to 
said certifier identification areas wherein certification data associated with each 
certifier is respectively stored in a visually viewable, rewritable and erasable 
state; 

determining whether or not certifier signature information contained in said plurality 

of display data certifier identification areas, or to be added to one of said display 
data certifier identification areas, matches with corresponding registered certifier 
signature information stored in, or separately added to, a registered certifier 
signature information database, and, in those cases wherein a match is not judged 
to be present, issuing a warning that signature tampering may have occurred; 

extracting as a characteristic quantity that repre s ents a general characteristic of image 
data generated by reading the display data according to an instruction from a 
certifier who has certified the display data, 

generating encrypted data by encrypting said characteristic quantity using an encryption 
key paired with an identifier, 
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appending each said identifier and its associated encrypted data to the rewritable medium 
in a certification data area corresponding to the certifier who issued the 
instruction for the extraction of the characteristic information, 

obtaining the encryption key based on the identifier according to an instruction of a 
verifier who verifies a certificate^ 

decrypting the obtained characteristic quantity of ef the display data, and 

judging whether or not the decrypted characteristic quantity obtained by decrypting the 
encrypted data and the characteristic quantity of the display data match, and, in 
those cases wherein a match is not judged to be present, issuing a warning that 
signature tampering may have occurred. 



2. (Canceled) 



3. (Currently Amended) An anti-tampering signature apparatus for executing an anti -tampering 
signature method comprising: 

a rewriteable media including (i) an information display area wherein display data is stored in 

a visually viewable, rewritable and erasable state, (ii) a plurality of display data certifier 
identification areas wherein display data certifier signature information is stored in a 
visually viewable, rewritable and erasable state; and (iii) a plurality of certification data 
areas corresponding respectively to said plurality of display data certifier identification 
areas wherein certification data associated with each certifier is respectively stored in a 
visually viewable, rewritable and erasable state; 
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first tampering judgment means for determining whether or not certifier signature information 
contained in said plurality of display data certifier identification areas, or to be added to 
one of said plurality of display data certifier identification areas, matches with 
corresponding registered certifier signature information stored in, or separately added to, 
a registered certifier signature information database, and for in those cases wherein a 
match is not judged to be present, issuing a warning that signature tampering may have 
occurred; 

characteristic quantity extraction means for extracting as_a characteristic quantity that repr e s e nts 
a general characteristic of image data generated by reading the display data according to 
an instruction from a certifier who has certified the display data, 

encryption / decryption means that generates encrypted data by encrypting said 

characteristic quantity using an encryption key paired with an identifier, and decrypts the 
encrypted data into said characteristic quantity, 

appending means for appending each said identifier and its associated encrypted data to 

the rewritable medium in a certification data area corresponding to the certifier who 
issued the instruction for the extraction of the characteristic information, and 

second-tampering judgment means forjudging whether or not the decrypted characteristic 

quantity and the characteristic quantity of the display data match, and, in those cases 
wherein a match is not judged to be present, issuing a warning that signature tampering 
may have occurred. 



4. (Currently Amended) An anti-tampering signature system wherein display data is displayed on a 
rewritable medium including (i) an information display area wherein display data is 
stored in a visually viewable, rewritable and erasable state, (ii) a plurality of display data 
certifier identification areas wherein display data certifier signature information is stored 
in a visually viewable, rewritable and erasable state; and (iii) a plurality of certification 
data areas corresponding respectively to said plurality of display data certifier 
identification areas wherein certification data associated with each certifier is respectively 
stored in a visually viewable, rewritable and erasable state is certified, comprising: 
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first tampering judgment means for determining whether or not certifier signature information 
contained in said plurality of display data certifier identification areas, or to be added to 
one of said plurality of display data certifier identification areas, matches with 
corresponding registered certifier signature information stored in, or separately added to, 
a registered certifier signature information database, and for in those cases wherein a 
match is not judged to be present, issuing a warning that signature tampering may have 
occurred; 

encryption key generating means that registers an identifier and generates an encryption key, 
storage means for storing the identifier and the encryption key, 

certifying means that supplies the encryption key according to a query based on the identifier, 

tTTTCt 

anti tamp e ring s ignature apparatus provid e d with a characteristic quantity extraction means for 
extracting as_a characteristic quantity that represents a general characteristic of image 
data generated by reading the display data according to an instruction from a certifier 
who has certified the display data, 
encryption / decryption means that generates encrypted data by encrypting said characteristic 
quantity using an encryption key paired with an identifier and decrypts the encrypted data 
into said characteristic quantity, 
appending means for appending each said identifier and its associated encrypted data to the 
rewritable medium in a certification data area corresponding to the certifier who issued the 

instruction for the extraction of the characteristic information, and 
a second tampering judgment means forjudging whether or not the decrypted characteristic 

quantity and the characteristic quantity of the display data match, and, in those cases 
wherein a match is not judged to be present, issuing a warning that signature tampering may 
have occurred. 



5. (Canceled) 
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6. (Currently Amended) A computer-readable recording medium on which the anti tampering 
signature program according to claim 5 is record e d is stored an 
anti-tampering signature program for causing a computer to perform an 
anti-tampering signature method with respect to a rewritable media including (i) an 
information display area wherein display data is stored in a visually viewable, 
rewritable and erasable state, (ii) a plurality of display data certifier identification 
areas wherein display data certifier signature information is stored in a visually 
viewable, rewritable and erasable state; and (iii) a plurality of certification data areas 
corresponding respectively to said certifier identification areas wherein certification 
data associated with each certifier is respectively stored in a visually viewable, 
rewritable and erasable state, said anti-tampering signature program comprising the 
steps of:: 

determining whether or not certifier signature information contained in said 

plurality of display data certifier identification areas, or to be added to, 
one of said plurality of display data certifier identification areas, matches 
with corresponding registered certifier signature information stored in, or 
separately added to, a registered certifier signature information database, 
and, in those cases wherein a match is not judged to be present, issuing a 
warning that signature tampering may have occurred; 

extracting asa characteristic quantity that represents a general characteristic of 
image data generated by reading the display data according to an 
instruction from a certifier who has certified the display data, 
generating encrypted data by encrypting said characteristic quantity 
using an encryption key paired with an identifier, 

appending each said identifier and its associated encrypted data to the rewritable 
medium in a certification data area corresponding to the certifier who 
issued the instruction for the extraction of the characteristic information, 
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obtaining the encryption key based on the identifier according to an instruction of 

a verifier who verifies a certificate, 
decrypting the obtained characteristic quantity of the display data, and 
judging whether or not the decrypted characteristic quantity obtained by 

decrypting the encrypted data and the characteristic quantity of the 
display data match, and, in those cases wherein a match is not judged to 
be present, issuing a warning that signature tampering may have 
occurred. 
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